Lenovo Switch Center vulnerabilities
4 vulnerabilities
Known vulnerabilities in Lenovo Switch Center, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2015-7818ibm · system_networking_switch_center +1 moreibm system_networking_switch_centerThe administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.EPSS0.43%MediumCVE-2015-7819ibm · system_networking_switch_center +1 moreibm system_networking_switch_centerThe DB service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain sensitive administrator-account information via a request on port 40999, as demonstrated by an improperly encrypted password.EPSS1.32%HighCVE-2015-7817ibm · system_networking_switch_center +1 moreibm system_networking_switch_centerRace condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide FileReader.jsp input containing directory traversal sequences to read arbitrary text files, via a request to port 40080 or 40443.EPSS1.41%HighCVE-2015-7820ibm · system_networking_switch_center +1 moreibm system_networking_switch_centerRace condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows remote attackers to obtain privileged-account access, and consequently provide ZipDownload.jsp input containing directory traversal sequences to read arbitrary files, via a request to port 40080 or 40443.EPSS1.41%